CVE-2005-4013: Medium severity php web statistik vulnerability
Published Dec 5, 2005
·Updated
PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as statistics and the log directory location, possibly including the logdb.dta file.
Affected Software
1 affected component
PHP Web Statistik=1.4
Remediation
Patch Available
Event History
Dec 5, 2005
CVE Published
11:03 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4013?
CVE-2005-4013 has a medium severity level due to its potential for information disclosure.
2
How do I fix CVE-2005-4013?
To fix CVE-2005-4013, ensure that the stat.cfg file is not stored under the web root and apply appropriate access controls.
3
What type of information can be disclosed through CVE-2005-4013?
CVE-2005-4013 can disclose sensitive information such as statistics and the location of the log directory.
4
In which version is CVE-2005-4013 present?
CVE-2005-4013 is present in PHP Web Statistik version 1.4.
5
Who is affected by CVE-2005-4013?
Users of PHP Web Statistik 1.4 are affected by CVE-2005-4013 due to the improper storage of configuration files.